searchengines-web/MeiliSearch
searchengines-web/MeiliSearch
1
0
Fork 0
mirror of https://github.com/meilisearch/MeiliSearch synced 2025-07-03 11:57:07 +02:00
Code Issues Releases Wiki Activity

Check the Rhai syntax before accepting the script

Browse source
This commit is contained in:
Clément Renault 2024-05-09 21:51:51 +02:00
parent 2d97164d9f
commit 45af18ae9c
No known key found for this signature in database
GPG key ID: F250A4C4E3AE5F5F
3 changed files with 11 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

5
meilisearch/src/routes/indexes/documents.rs
View file

@ -599,6 +599,11 @@ pub async fn edit_documents_by_function(
// analytics.delete_documents(DocumentDeletionKind::PerFilter, &req);
let engine = milli::rhai::Engine::new();
if let Err(e) = engine.compile(&function) {
return Err(ResponseError::from_msg(e.to_string(), Code::BadRequest));
}
if let Some(ref filter) = filter {
// we ensure the filter is well formed before enqueuing it
|| -> Result<_, ResponseError> {